Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nPVcTbTK-fvP0ndgKJb_TVb3vms.roa
File: nPVcTbTK-fvP0ndgKJb_TVb3vms.roa (raw, json)
Hash identifier: 28mXD5Sps1UGHXUOMJ1VyXDyOke/hS4eNJgc9wW/KkI=
Subject key identifier: 9C:F5:5C:4D:B4:CA:F9:FB:CF:D2:77:60:28:96:FF:4D:56:F7:BE:6B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019CFB4949547D05426ED4113E1688F58B8E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nPVcTbTK-fvP0ndgKJb_TVb3vms.roa
Signing time: Tue 17 Mar 2026 10:13:30 +0000
ROA not before: Tue 17 Mar 2026 10:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:49:49:54:7d:05:42:6e:d4:11:3e:16:88:f5:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 17 10:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cf55c4db4caf9fbcfd277602896ff4d56f7be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:aa:9a:db:12:3f:b9:1e:3b:6d:44:ba:c2:
c5:1b:5a:ea:ec:d0:df:cb:53:d6:41:81:f7:fd:73:
72:d1:54:fc:dd:63:81:f2:c9:e7:39:e1:28:e8:9d:
45:10:c8:e6:ad:05:44:c3:76:0d:8e:a6:4c:77:11:
d2:99:6c:9b:3c:64:e7:ec:7f:e1:22:3b:c0:30:85:
a5:0b:34:f5:64:8f:fd:69:bf:7e:13:6b:59:ea:b9:
9e:09:40:0d:24:b4:31:95:2a:4d:b1:a1:eb:be:b9:
0c:fc:3c:f2:46:98:5d:00:b5:13:f5:b7:e9:c3:cd:
b4:65:4d:0d:44:15:82:eb:92:5c:f1:64:5a:58:ca:
21:e9:65:be:12:d4:f9:7a:e3:45:0a:ed:62:26:fd:
48:47:84:dd:af:e8:32:6f:42:93:bd:da:f8:13:17:
25:b6:92:9f:0d:4b:a4:be:a9:02:f7:1b:b2:53:0e:
f7:cc:ef:ae:22:d6:58:55:02:f0:23:70:6a:b8:6a:
80:8e:fa:9f:2c:64:1e:2f:f7:ed:b2:bb:ba:fd:39:
0c:f3:75:80:61:b9:fc:7b:81:89:44:31:33:e7:b1:
db:1e:0f:9b:d3:ff:42:e9:18:d4:36:aa:f8:4a:89:
80:a8:8e:a4:d2:01:44:9e:2d:2f:6b:4a:b7:c2:4c:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:5C:4D:B4:CA:F9:FB:CF:D2:77:60:28:96:FF:4D:56:F7:BE:6B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nPVcTbTK-fvP0ndgKJb_TVb3vms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.210.0/23
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.144.0/23
195.178.147.0/24
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
84:82:e3:18:f4:dc:22:1f:9d:1a:6d:1a:37:ca:69:8e:90:37:
29:0e:1d:a0:13:05:6c:55:a6:bf:50:81:af:b8:b1:95:d6:b0:
01:c3:bb:94:d5:d6:ea:2c:c0:e5:cb:93:b5:4a:e8:68:f5:a1:
18:13:9a:0c:83:b2:d7:7a:9c:64:10:e0:9f:ad:9e:0b:2d:1e:
c5:72:a5:d7:f2:db:f7:c3:b0:50:51:f6:64:4d:5c:be:96:4a:
6e:77:74:c2:4a:6f:35:dd:8a:0a:a5:ae:42:e7:1b:55:03:cf:
0f:4a:8c:c0:1c:f4:8e:86:26:0c:63:5f:eb:c7:db:b2:9c:62:
0c:48:2a:20:cb:d0:2f:ad:62:a7:c5:c6:03:50:63:63:d6:80:
14:9d:1b:a9:7d:34:4d:d6:1d:3e:87:37:67:05:27:0a:08:9a:
ed:f9:c5:2f:98:8e:9a:38:03:26:a8:42:95:0c:ce:e3:66:2a:
e0:7c:90:7e:82:61:8b:06:29:2e:fc:bf:cd:8f:be:4f:0c:4f:
de:e0:da:d1:6d:67:da:bd:1a:8e:53:d2:de:0a:3c:77:5d:be:
aa:97:63:54:68:9b:3f:a4:b7:34:b8:85:1f:79:fa:9c:65:c4:
a4:6a:09:bb:ac:14:35:b0:3d:69:98:1c:81:66:74:de:a1:a5:
ac:3f:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:08:09 2026 by rpki-client